CVE-2026-86604 | GTranslate Plugin up to 5.0.0 on WordPress Shortcode injection

September 23, 2026 Yanac

A vulnerability labeled as critical has been found in GTranslate Plugin up to 5.0.0 on WordPress. Impacted is an unknown function of the component Shortcode Handler. Such manipulation leads to injection.

This vulnerability is listed as CVE-2026-86604. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More